C. gateway D. netmask
E. routing protocol Answer: D
QUESTION 218:
Which two of the following Class B IPv4 networks are reserved by IANA for private address assignment and private routing? (Choose two)
A. 128.0.0.0 B. 169.16.0.0 C. 169.254.0.0 D. 172.16.0.0 E. 172.20.0.0
Answer: C, D
Explanation The address 192.168.x.x and 172.16.x.x are well known internal use addresses. 172.16 is a Class B IP number. 169.254 is an class B internal use IP number This IP range is also uses by Microsoft, then known as APIPA addresses when no DHCP address can be provided.
QUESTION 219:
With a Class C address, and a subnet mask of 255.255.255.0, how many host addresses are assignable?
Answer: 254 QUESTION 220:
Your IP address is 1.2.3.3. Which command would add a default gateway using the network 1.2.3.4?
Answer: route add default gw 1.2.3.4
Actualtests.com - The Power of Knowing QUESTION 221:
Your IP address is 170.35.13.28 and your network mask is 255.255.255.192. What host IP address is NOT a part of your local subnet?
A. 170.35.13.33 B. 170.35.13.88 C. 170.35.13.62 D. 170.35.13.55
Type in just the letter of the answer:
Answer: B
QUESTION 222:
There is any entry like the following in the file /etc/ftpusers:
#root
Will root be allowed to connect via ftp to this host?
Answer: no QUESTION 223:
To find the port used by a particular known service, you would look in what file?
Type the full path and name of the file.
Answer: /etc/services QUESTION 224:
What system file contains definitions of well known ports, their associated services and protocols?
A. /etc/services
B. /etc/sysconfig/network-scripts C. /etc/services.conf
D. /etc/inet/hosts E. None of the choices Answer: A
QUESTION 225:
Select from the list below the daemons that are present on a standard Linux server to support routing. Choose all that apply.
Actualtests.com - The Power of Knowing A. gated
B. ripd C. routed D. ospfd E. bgpd
Answer: B, C, D, E QUESTION 226:
What is a well-known service that binds port 25 and is it required on all hosts?
A. SNMP and it should be turned off if not needed.
B. SMTP and it is a required service.
C. SMTP and it is only required on MX hosts.
D. SLPD and it is required if you run LDAP services.
E. SSHD and it is required for secure logins.
Answer: C QUESTION 227:
What command will display the active connections and Unix domain sockets for a running Linux machine with networking configured? Type just the command to accomplish this.
Answer: netstat QUESTION 228:
Suppose that the command netstat-a hangs for a long time without producing output.
You might suspect:
A. A problem with NFS B. A problem with DNS.
C. A problem with NIS.
D. A problem with routing.
E. That the netstat daemon has crashed.
Answer: E
QUESTION 229:
You need to view the hardware address and IP address information for all of your
Actualtests.com - The Power of Knowing configured and active interfaces. Type the simplest command string that will accomplish this.
Answer: ifconfig QUESTION 230:
To immediately stop a DDOS attack from 10.1.1.128, what can you do? Type the command with the necessary options and arguments.
Answer: route add 10.1.1.128 lo QUESTION 231:
Your machine has two working NIC's with proper addresses. You want to split your network into two new subnets. What single command will accomplish this?
A. ifconfig B. route C. default D. netstat
E. None of the choices Answer: A
QUESTION 232:
Your server has two fully functional NIC's with correct IP configuration. The server is not forwarding traffic between the NIC's. Which command string will set the cards to forward properly?
A. setparam 1 > /proc/sys/net/ipv4/ip_autoconfig B. echo 1 > /proc/sys/net/ipv4/ip_forward
C. set $=1 /proc/sys/net/ipv4/route D. cat $1 > /proc/sys/net/ethernet
E. vi +/1 /proc/sys/net/unix/max_dgram_qlen Answer: B
QUESTION 233:
You have a Linux system routing 3 networks through 3 separate NICs and are having trouble with your IP forwarding. What file would you check to ensure that IP forwarding is enabled?
A. /etc/defaultrouter
Actualtests.com - The Power of Knowing B. /proc/net/tcp
C. /proc/sys/net/ipv4/ip_forward D. /var/log/messages
Answer: C
QUESTION 234:
Your machine's IP address used to function, but it's only got the localhost "lo"
entry now. What three client-mode commands could you possibly use to get a new DHCP address?
A. dhcpd B. ipconfig C. dhclient D. pump E. dhcpcd Answer: C, D, E QUESTION 235:
In what file can you configure your name server resolution queries to use the localhost first? Type the full path and name of the file.
Answer: /etc/nsswitch.conf QUESTION 236:
Which local system networking file binds a hostname to an IP address? Type the full path and name of the file.
Answer: /etc/hosts QUESTION 237:
To change your Ethernet interface eth0 to the IP address 10.4.4.100 with a default class C subnet mask, type the full command string to accomplish this.
Answer: ifconfig eth0 10.4.4.100 netmask 255.255.255.0
Explanation: ifconfig eth0 10.4.4.100 netmask 255.255.255.0
Alternative correct answer: ifconfig eth0 10.4.4.100 netmask 255.255.255.0 up With the option up - you set these inferface active.
Actualtests.com - The Power of Knowing QUESTION 238:
What is the command most often used for configuring network interfaces?
Answer: ifconfig QUESTION 239:
You wish to restart the network daemon on a Redhat Server. Type in the command and any arguments that to accomplish this without using any absolutes pathnames:
Answer: service network restart QUESTION 240:
You wish to change you network settings permanently using a text/graphical tool.
Type in the command to start this tool:
Answer: netconfig QUESTION 241:
Type in the name of the file including path of the static host name to IP address configuration file:
Answer: /etc/hosts QUESTION 242:
What command could you use to confirm function of a ppp connection before establishing it?
A. minicom B. hyperterminal C. setserial D. modemset
E. None of the choices Answer: A
QUESTION 243:
Select all of the protocols that are supported by the Linux implementation of ppp.
A. chap B. mschap
Actualtests.com - The Power of Knowing C. pap
D. spap E. eap
Answer: A, B, C QUESTION 244:
What ppp option governs how long an interrupted connection will remain down before it attempts to reconnect?
A. holddown B. holdoff C. inactive D. delay E. wait Answer: B
QUESTION 245:
When using the PPP daemon make a connection, what option is set to configure it to use hardware flow control?
A. crtscts B. rsync C. nsync D. connect Answer: A
QUESTION 246:
When using pppd which authentication protocol is the most secure?
A. clear text B. PAP C. CHAP D. LAP Answer: C
Explanation: PAP sends all information as clear text.
CHAP sends all information as encrypted text.
Actualtests.com - The Power of Knowing QUESTION 247:
According to the PPP HOWTO which piece of software could help you test a modem?
A. chat B. dhcpd C. minicom D. Hylafax E. netconfig Answer: C
QUESTION 248:
When using /etc/ppp/peers/* files, which of the following is true:
A. The /etc/ppp/options should be empty.
B. Any user can run pppd from the command line.
C. The dial-on-demand option cannot be used.
D. You must use chap authentication.
Answer: A
QUESTION 249:
What command would help you test if your ppp connection was functional? Type just the command name.
Answer: minicom QUESTION 250:
What is the exact, case-sensitive option that governs flow-control for the ppp daemon?
Answer: crtscts QUESTION 251:
To disable telnet service on a system, which action should you take?
A. Put NONE in /etc/telnet.allow
B. Remove the appropriate telnet init script.
C. Put a line 'ALL:ALL' in /etc/hosts.deny
Actualtests.com - The Power of Knowing D. Comment the telnet entry in /etc/inittab
E. Comment the telnet entry in /etc/inetd.conf Answer: E
QUESTION 252:
On a default install of a Linux server, regardless of the distribution version, what are the easiest methods to disable telnet, but not uninstall or remove the service?
Choose two.
A. Comment telnet out of the /etc/inetd.conf file B. Delete the /etc/rc.d/init.d/telnet file
C. Rename all SXXtelnet links in the /etc/rc or /etc/rc.d directories D. Run "chmod 554 /etc/xinetd.d/telnet"
E. Nothing, it's not enabled by default Answer: A, E
QUESTION 253:
Your DNS server needs to be configured for speed and security. Choose the best answer.
A. Disable inetd, run named standalone, only allow tcp on ports 25 and 53 B. Disable inetd, run named standalone, only allow tcp on ports 25 and 110 C. Enable inetd, run named as an inetd service, only allow tcp on ports 25 and 53 D. Disable inetd, run named as a standalone on the apache server.
Answer: A
QUESTION 254:
Which file is responsible for configuring the inet daemon?
A. /etc/inetd.conf B. /etc/xinetd.conf C. /etc/tcpd.conf D. /etc/inet.conf Answer: A
QUESTION 255:
You decide to use xinetd instead of inetd.
What must be done in order to properly configure xinetd?
Actualtests.com - The Power of Knowing A. You must create a new configuration file for xinetd.
B. You must add xinetd to /etc/services.
C. You must add xinetd support to your tcpwrappers configuration files.
D. Nothing, xinetd uses the same configuration files as inetd.
Answer: D
Explanation: Both use the same configuration file.
QUESTION 256:
You have replaced inetd with xinetd.
What must be done after installing to ensure that your machine will work correctly?
A. You must add a symbolic link from inetd.conf to xinetd.conf.
B. You don't have to do anything because they are compatible.
C. You must create a new configuration file for xinetd.
D. You must run xinetd-configure first.
Answer: B
Explanation: Both use the same configuration file.
QUESTION 257:
Converting from the inetd to xinetd services requires populating entries in what file, including the full path and name?
Answer: /etc/xinetd.conf QUESTION 258:
What is the command to check the syntax of your /etc/inetd.conf?
Answer: tcpdchk QUESTION 259:
What command can you use to determine the users connected to a Linux ftp server?
Type just the command to accomplish this.
Answer: ftpwho QUESTION 260:
Actualtests.com - The Power of Knowing What is the file that contains the settings and conversion parameters for the ftp server? Type in the name of the file only:
Answer: ftpconversions QUESTION 261:
What configuration file is used for settings and conversion parameters for the ftp daemon?
A. ftpusers B. ftpconvert C. ftpconversions D. in.ftpd
E. ftpdefaults Answer: C
QUESTION 262:
What file is used to define a list of users that may NOT login to via the ftp daemon?
Type just the name of the file.
Answer: ftpusers QUESTION 263:
You want a secure and fast DNS server that must also be quickly accessible remotely.
You should:
A. Reject all udp packets.
B. Reject all icmp packets.
C. Reject all icmp untrusted-host packets.
D. Disable inetd, run ssh and named as standalone daemons.
E. Use tcpwrappers to only allow connections to ports 22 and 53.
Answer: D, E QUESTION 264:
What file must you create in your home directory in order to enable mail forwarding?
A. .redirect B. .forward
Actualtests.com - The Power of Knowing C. .plan
D. .mail
E. None of the choices Answer: B
QUESTION 265:
What command with options and arguments will display the mail servers for lpi.org?
Answer: dig lpi.org mx Answer: dig lpi.org MX QUESTION 266:
In what file are the mail aliases kept for Sendmail? (Provide the complete path)
A. /etc/aliases B. /etc/mailaliases C. /etc/sendmail.aliases D. /etc/sendmail/aliases E. /var/spool/mail/aliases Answer: A
QUESTION 267:
What directory be default contains the delivered mail for each user?
A. ~/mail/
B. /usr/mail/
C. /var/mail/
D. /var/mail/spool/
E. /var/spool/mail/
Answer: E
QUESTION 268:
To avoid spammers using your mail server to relay their messages, you need to ________________.
A. Disable the relay control in /etc/aliases B. Set up a ruleset for this in /etc/sendmail.cf
Actualtests.com - The Power of Knowing C. Set up relay control in your DNS's MX record.
D. Recompile sendmail with the -NORELAY flag.
Answer: B
QUESTION 269:
You are running an email server configured with the default settings.
In which directory will you found the delivered mail for the user foo?
A. /var/spool/mail B. /home/foo/mail C. /var/mail/spool D. /var/users/mail
Answer: A
Reference: man mail (http://man.linuxquestions.org) QUESTION 270:
What commands with any options, will cause sendmail to recognize newly added aliases while it's running?
Answer: sendmail -bi Answer: newaliases QUESTION 271:
In what directory does undelivered remote mail get stored in? Type the full path and name of the file.
Answer: /var/spool/mqueue QUESTION 272:
Undelivered mail for local system users is stored in what directory? Type the full path of the directory.
Answer: /var/spool/mail/username QUESTION 273:
You are performing an onsite security inspection of division of your company. On an Apache server, you want to determine what files are needed and which can be removed from the /etc/httpd folder.
Actualtests.com - The Power of Knowing Which of the following are possibly valid Apache confguration files? Choose all that apply:
A. httpd.conf B. apached.conf C. srm.conf D. access.conf E. in.http.conf Answer: A, C, D QUESTION 274:
Which of the following files typically are used to configure Apache? (Choose two)
A. srm.conf B. www.conf C. http.boot D. httpd.conf E. apache.conf Answer: A, D QUESTION 275:
You have a standard Apache web server installation and want to make it respond to requests on port 8088. To do this, what configuration file do you need to change?
A. None. This is the default port.
B. /etc/httpd/apache.conf C. /etc/httpd/ports.conf D. /etc/httpd/httpd.conf E. /etc/httpd/access.conf Answer: D
QUESTION 276:
What file is used in recent apache distributions to configure the service? Type the full path and name of the file.
Answer: /etc/apache/httpd.conf Answer: /etc/apache2/httpd.conf
Explanation: On new systems (since Suse Linux V9.0) are these the correct files.
Actualtests.com - The Power of Knowing On older systems (before Suse Linux V9.0) the apache config file is found in /etc/httpd.conf
QUESTION 277:
What configuration file and directive will alter your apache server IP and or port that it listens to?
A. Port B. IPAddress C. Listen
D. MinSpareServers Answer: C
QUESTION 278:
What Apache directive must you change when using inetd to control your Apache server?
A. ServerType B. ServerInetd C. InetServer D. StartServer E. ServerMethod Answer: A
QUESTION 279:
Which Apache Directive specifies the location of the HTTP documents?
A. RootDocument B. ServerRoot C. DocumentRoot D. RootServer E. DocPath Answer: C
QUESTION 280:
What command can be used to shut down the Apache server gracefully?
A. apacheshut B. apachectl
Actualtests.com - The Power of Knowing C. apachestop
D. apachestart Answer: B
Explanation: But the option is missing.
QUESTION 281:
What is the recommended setting for StartServers in a medium sized Apache installation?
A. 5 B. 10 C. 15 D. 20 Answer: B
QUESTION 282:
How many spare server processes are required by Apache for the typical, low-to-moderate volume website?
A. 1 B. 50 C. 10 D. 200 Answer: C
QUESTION 283:
When an Apache server is configured to provide 10 spare server processes, which kind of website would it typically serve?
A. A low-to-moderate volume website B. A website for no more than 10 users C. A high volume web site
D. A one-user volume website Answer: A
QUESTION 284:
In order to allow a Win95 host to resolve the name of and map network drives to
Actualtests.com - The Power of Knowing your Linux server, what services should be running? Choose Two.
A. nmbd B. smbd C. named D. routed E. winsd Answer: A, B QUESTION 285:
What is the simplest method to connect a Win98 host to a Linux Server?
A. Velcro B. Samba C. NFS D. DNS E. WINS Answer: B
QUESTION 286:
What is true about the root user and NFS?
A. NFS shares don't allow root access by default B. NFS automatically masks out share permissions
C. NFS automatically maps all root UID's to the local user "rootsquash"
D. NFS ignores all users with a UID of 0 and a GID of 0 E. NFS pays no attention whatsoever to security
Answer: A
QUESTION 287:
What configuration files on a Linux Server can be configured to share file systems with clients? Choose Two.
A. /etc/nmbd B. /etc/smbd
C. /etc/smb/samba.conf D. /etc/smb.conf E. /etc/samba/smb.conf Answer: D, E
Actualtests.com - The Power of Knowing QUESTION 288:
What command is used to monitor connections to the SMB server?
A. smbclient B. testparm C. smbstatus D. smbstat Answer: C
QUESTION 289:
What is the command to map a Windows user ID to a Linux user ID for use with the Samba Server?
A. smbuser B. smbpasswd C. smbadduser D. useraddsmb E. useradd Answer: C
QUESTION 290:
What file do you configure to make changes to your smbd and nmbd daemons?
Type the full path and name of the file.
Answer: /etc/smb.conf
Answer: /etc/samba/smb.conf QUESTION 291:
Type in the command to monitor connections to Samba:
Answer: smbstatus QUESTION 292:
You wish to restart both Samba daemons. Type in the command and any arguments that to accomplish this without using any absolutes pathnames:
Answer: service smb restart
Actualtests.com - The Power of Knowing QUESTION 293:
Type in the name of the samba daemon that is responsible for WINS names resolution
Answer: nmbd QUESTION 294:
Which option in the /etc/fstab file causes all users IDs to be mapped to the system's anonymous ID when mounting a NFS mounted file system?
A. no-root-squash B. all-squash C. all-id-squash D. root-squash Answer: B
QUESTION 295:
Which fstab option governs that all root ID are mapped to anonymous ID when mounting a NFS mounted file system?
A. no-root-squash B. root-squash C. all-squash D. squash-root Answer: B
QUESTION 296:
This is a line from the file /etc/export:
/product Certkiller (rw) What does it mean?
A. Only user Certkiller may access the filesystem /product when it is NFS mounted.
B. This computer will mount the filesystem /product on Certkiller via NFS.
C. The filesystem /product is exported for NFS mount to computer Certkiller . D. All NFS access to /product will use suid Certkiller .
Answer: C
Actualtests.com - The Power of Knowing QUESTION 297:
You are not using the WINS service on your network, but need to provide
NETBIOS resolution to your hosts. What is the name of the daemon that provides these services on a Linux server?
A. nmbd B. dns C. winsd D. lmhostsd E. smbd Answer: A
QUESTION 298:
These lines are taken from /etc/smb.conf:
workgroup = group1 guest account = nobody
What else is needed for this to work?
A. nobody must be a valid group on the server.
B. nobody must be a user name listed in /etc/passwd.
C. group1 must be a valid group on the server.
D. workgroup must be a valid group on the server.
Answer: B
QUESTION 299:
Type the command to check the syntax and contents of the smb.conf file:
Answer: testparm QUESTION 300:
Type in the name of the samba daemon that is responsible for printer and file sharing:
Answer: smbd QUESTION 301:
Which daemon allows Linux to share its file systems and printers with unmodified Windows clients?
Actualtests.com - The Power of Knowing A. X Window
B. nmbd C. smbd D. WINS E. NFS Answer: C
QUESTION 302:
Shares can be configured for export via the NFS service by editing what file?
A. /etc/exports B. /etc/export C. /etc/exportfs D. /etc/nfs/exports Answer: A
QUESTION 303:
What file contains a list of directories for an NFS daemon to server to other systems?
(Provide the complete answer) Answer: /etc/exports
QUESTION 304:
You are running a machine which exports a list of directories using NFS.
Provide the complete path to the file which contains this list.
Answer: /etc/exports QUESTION 305:
Which two services resolve Netbios names to IP addresses?
A. WINS